Contracts & Agreements_125-2025 - Laserfiche WebLink

Home Browse Search

Docusign Envelope ID: 05CA277F-009C-4398-ADD4-0439EFE4AC62 ENDPOINT SECURITY SERVICES PURCHASE This SERVICES AGREEMENT ("Agreement") for Endpoint Security Services ("ESS") is made by and between the Center for Internet Security, Inc. ("CIS"), located at 31 Tech Valley Drive, East Greenbush, New York 12061-4134, a Maryland nonprofit corporation and City of Redlands, a municipal corporation and general law city ("Entity") with its principal place of business at: 35 Cajon Street, Redlands, California 92373. CIS and Entity are referred to herein collectively as the "Parties". In consideration of the mutual covenants contained herein, the Parties do hereby agree as follows: Purpose The purpose of this Agreement is to set forth the mutual understanding between the Entity named above and CIS, with respect to CIS' provision of ESS and selected Add -on Services to the Entity. II. Definitions A. Security Operation Center (SOC): CIS' 24 X 7 X 365 watch and warning center that provides cybersecurity infrastructure monitoring, dissemination of cyber threat warnings and vulnerability identification and mitigation recommendations. B. Endpoint Security Services ("ESS"): Endpoint Security Services (ESS) includes the following services: 1. Next Generation Antivirus (NGAV): A solution aimed at preventing cyber- attacks that is deployed on endpoint devices and has the following capabilities: • Detect malicious activity using signature -based and behavior -based threat detection methods with the capability to automate- prevention (block attacks); • Deny/allow indicators list management to include anomalous behavior - based indicators; • Endpoint and file quarantine functionality; • Threat notification and alerts; and • Web -based management interface with a cloud -based data administration component for enterprise deployment. 2. Endpoint Detection & Response (EDR): Deployment and maintenance of an EDR software agent on Entity's identified endpoint devices, which will (a) block malicious activity at a device level if agreed to by the Entity; (b) remotely isolate compromised systems after coordination with the Entity; (c) identify threats on premise, in the cloud, or on remote systems; (d) inspect network traffic in a decrypted state on the endpoint for the limited purpose of identifying malicious activity; and (e) identify and remediate malware infections.